What happened
The MCP request handler in elvix-sdk passes the attacker-controlled path argument into outbound requests without validation, allowing server-side request forgery. The exploit has been released publicly and the vendor was contacted early for disclosure but did not respond, leaving affected SDK consumers without a patch.
Why it matters
An MCP SDK with an exploitable SSRF gives prompt-injected agents (or direct MCP clients) a path to internal network probing and data access through the least-vetted surface of an agent stack — and here there is no vendor fix available at publication.
Attack vector
Remote (authenticated per CVSS AV:N/PR:L) attacker manipulates the path argument of the MCP request handler to trigger server-side requests to arbitrary (including internal) hosts; the exploit is publicly available.
Affected systems
elvix-sdk (021is) 0.10.0 through 0.10.1 (src/mcp/index.ts MCP Request Handler)
Mitigation
No vendor response / no fix as of publication; restrict MCP server exposure and sanitize path arguments (VulnCheck/VulDB record).